WSUS KB patches and sync status

Naveen Kammari 0 Reputation points
2023-07-11T13:25:35.4833333+00:00
  • WSUS is configured to download specific products and classifications.
  • Is there a means to configure WSUS to provide information for ALL missing patches, not just the products that are synchronized with Microsoft?
  • For example: Office 2016 is selected to sync but Office 2010 is not selected to sync.

                                                               i.      If a machine has Office 2010, can WSUS advise which patches are missing for 2010?

Windows for business | Windows Server | User experience | Other
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Wesley Li 11,285 Reputation points
    2023-09-22T10:03:10.5033333+00:00

    Hello

    WSUS (Windows Server Update Services) is designed to provide updates for specified Microsoft products to computers in a corporate environment. Therefore, if a product (like Office 2010 in your example) is not selected to sync in WSUS, it will not provide information about missing patches for that product.

    However, you can use PowerShell to find missing updates on WSUS client computers. Here’s a simple script that you can use:

     

    $UpdateSession = New-Object -ComObject Microsoft.Update.Session

    $UpdateSearcher = $UpdateSession.CreateupdateSearcher()

    $Updates = @($UpdateSearcher.Search("IsHidden=0 and IsInstalled=0").Updates)

    $Updates | Select-Object Title

     

    This script will list all the pending/missing Windows updates. Please note that this script will only list the updates that are missing and not install them.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.